kimai

Records47All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

kimai records in CISA KEV

No kimai vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Kimai 2 · all components

TI-2021-02922 CVE-2021-4033 · GHSA-4jwx-78vx-gm6g

LOW 29

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00522 Published 2021-12-09 Fixed in 1.16.7 CWE-352

TI-2021-02873 CVE-2021-3976 · GHSA-427q-jp8v-ww95

LOW 29

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00399 Published 2021-11-19 Fixed in 1.16.2 CWE-352

TI-2019-11585 CVE-2019-15481 · GHSA-7v44-75jf-22gj

LOW 29

Kimai v2 before 1.1 has XSS via a timesheet description.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00861 Published 2019-08-23 Fixed in 1.1 CWE-79

TI-2021-02860 CVE-2021-3963 · GHSA-gf2c-93hm-r9j5

LOW 20

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00395 Published 2021-11-19 Fixed in 1.16.2, 1.16 CWE-352

TI-2021-02854 CVE-2021-3957 · GHSA-2xwq-h7r9-6w27

LOW 20

kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00383 Published 2021-11-19 Fixed in 1.16.2, 1.16 CWE-352